Privacy Policy

Who we are

Waffle Wala is a waffle and dessert shop at Ahad Arcade, Block C3, Gulberg III, Lahore. In this policy “we” means Waffle Wala, and “the site” means wafflewala.pk, including the QR menu at wafflewala.pk/menu and the rewards page at wafflewala.pk/rewards.

Questions about this policy: +92 307 8483486 (call or WhatsApp), or at the counter at Ahad Arcade, Block C3, Gulberg III, Lahore.

What we collect when you browse

You can use the whole site without an account and without telling us who you are.

• We do not use advertising cookies, tracking pixels or analytics services, and we do not build profiles of visitors.
• Like every website, our hosting provider and our menu server keep short technical logs of requests — your IP address, browser type, the page or menu data requested and the time — to keep the site running, secure and free of abuse.
• Your order list (“Your order”) stays in your browser while the page is open. It is not sent to us; you place the order yourself through Foodpanda, WhatsApp, Instagram or at the counter.
• A few small items are stored in your browser so the site works offline and remembers your cookie choice. They are listed in our Cookie Policy.

Waffle Wala Rewards

If you activate a rewards card we collect what the programme needs to work:

• your name and mobile number, and the card number printed on your card;
• the date and time you accepted the rewards terms;
• the qualifying orders our staff record on your card (date, items and amounts) and your sticker and reward status;
• for fraud prevention, a one-way scrambled (hashed) form of the IP address and the browser name used when you activated or looked up a card. The scrambled IP address cannot be turned back into the original.

Our counter staff see a partly hidden version of your mobile number; managers see it in full to help you, replace a lost card or resolve a problem. We do not use your number for marketing messages.

When you contact us

If you call, WhatsApp us or message us on Instagram, we receive what you send (for example your name, number and order). We use it to answer you and prepare your order. Those apps are run by their own companies under their own privacy policies.

How we use information

• to show the menu, prices and opening hours, and to keep the site working on and offline;
• to run Waffle Wala Rewards — record stickers, unlock and redeem rewards, and prevent misuse;
• to answer your questions and orders;
• to keep our systems secure and meet our legal obligations.

We do not sell or rent your information.

Who else is involved

• Our hosting provider stores the site and our menu and rewards database for us.
• Google: our fonts are served from Google Fonts (your browser asks Google for them, which shares your IP address with Google), and the map in the Visit section is a Google Maps map, which loads only if you allow it — see the Cookie Policy.
• Foodpanda, WhatsApp, Instagram, Facebook and TikTok: when you follow a link to them, you are on their service and their privacy policies apply.

We may share information if the law requires it, or to protect our customers, staff or business from fraud or harm.

How long we keep it

Technical logs are kept for a short period by our hosting provider and then deleted. Rewards details are kept while your card is in use and afterwards only as long as we need them for our records or to settle a question about a reward. You can ask us to delete your rewards details at any time (this ends your card).

Your choices

• Ask what rewards details we hold about you, ask us to correct them, or ask us to delete them — contact us as below. To protect you, we will check your card number and the mobile number registered to it first.
• Change your cookie choice at any time from “Cookie settings” at the foot of every page.
• You can browse the menu and order without sharing anything with us.

Children

Our site is for a general audience. Waffle Wala Rewards is meant for people aged 13 and over; younger children should ask a parent or guardian to activate a card for them.

Security

The site is served only over HTTPS. Rewards details are stored on our server, not in your browser; staff accounts are protected with passwords, and access is limited by role. No system is perfectly secure, so please tell us straight away if you think your card has been misused.

Changes to this policy

If we change how we handle information we will update this page and the date below. Last updated: 11 October 2026.